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MEMORANDUM FOR: Deputy Director for Administration 


FROM: James H. McDonald 
Director of Logistics 
SUBJECT: Contractual and Industrial Security Oversight 
Don: 


1. During the last quarter of 1977, the Acting DDCI, 
Jack Blake, directed the formation of a task force to perform 
an in-depth review of industrial contractin i j 
security in CIA. That group i 
Office of Medical Services. 
ment Management Staff, Office of Logistics 
representative to the task force. The group finished its work 
in early 1978, with subsequent review and approval of resulting 
recommendations taking place at Executive Advisory Group (EAG) 
meetings in April and May of that same year. There is attached 
a current report which lists recommendations by the task force, 
approvals and dates of said approvals, offices to which action 
was assigned, and current status. You will note that the 
largest number of recommendations involve either OL or the 
Office of Security (OS). You will also note that of 51 approved 
recommendations and/or directions, 39 have now been completed. 
Two of the recommendations, #8 in the Industrial Security 
Interim Report, and #15 in the Final Report require that the 
Inspector General (IG) conduct periodic functional audits and 
inspections of the industrial contracting and industrial security 
process. These recommendations became the : 
current IG investigation bei1 
was tasked by the Acting DDA 
coordinator for implementation Of approved recommendations and 
also to provide periodic reports to your office. These reports 
were biweekly initially but have been aperiodic during the last 
few months because of the fact that only a few recommendations 
remained to be completed, most long term. 
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SUBJECT: Contractual and Industrial Security Oversight 


2. I would be happy to meet with you at your convenience 
to discuss any or all of the recommendations as well as action 


o date to implement said recommendations. Mr. Charles 25%1 
in OS has asked that he also be included in any briefing 
on task force recommendations and subsequent imp lementa- 


tion action. ral 
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ATTACHMENT 


CONTRACTUAL AND INDUSTRIAL SECURITY OVERSIGHT 
2S APR tues 


; : : : ACTION NECESSARY FOR TARGET COM- COMMENT/ 
RECOMMENDATION OR DIRECTION APPROVAL STATUS ASSIGNED TO IMPLEMENTATION PLETION DATE STATUS RECOMMENDATION 


SEAL LUN 
Industrial Security Interim Report _ 


Recommendation #1: That remedies avail- 4/18/78 ' Complete 
able in contract law be used as the primary 6/2/78 
means of enforcing contractor compliance : 
with industrial security standards. 


Recommendation #2: ‘That the Agency 4/18/78 OGC/OLC On 11 Jan 79, Brian Walsh, staff 
explore legislation which would empower 6/2/78 member for the Subcommittee on : 
the DCI to impose sanctions on industrial ; Federal Spending Practices and Open. H 
security contractors who fail to conform Government, stated unequivocally 3 
to security performance standards. , i : that any legislative punitive sanc- 

tions against contractors violating | { 
industrial contract security provi- ! 


further. No punitive provisions 
will be included in acquisition 
legislation. 


Recommendation #3: That Director “of : 4/18/78 Complete 
Security responsibilities for the 6/2/78 : 
Agency industrial security effort be 
clearly defined in the Office of 
Security series of Agency regulations. 


~ 


{ 
Recommendation #4: That Agency regula- 4/18/78 Complete 
tions be revised to clearly charge the 6/2/78 | | 
Director of Communications with responsi- an 
bility for and enforcement of communica~ - bes : | 
tions security at Agency-sponsored : . Be 
contractor facilities, including those o [ 


| 
| 
i 
i 


sions would not be considered | 
! 


of National Programs. 
5x1! 
H 
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: ; ACTION NECESSARY FOR TARGET COM- COMMENT/ 
RECOMMENDATION OR DIRECTION . APPROVAL STATUS ASSIGNED TO IMPLEMENTATION PLETION DATE STATUS RECOMMENDATION 


Industrial Security Interim Report 


Recommendation #5: That Agency regula- : 4/18/78 D/Sec i ae Complete 
tions be strengthened to give the Director 6/2/78 : : : 
of Security clear responsibility for the 
overall coordination of the entire indus- 
trial security effort of the Agency and 
for ensuring that classified procurement 
security support is well organized and 
effective, These regulations should 
include provision for: 


--Security audits of procurement 
security management practices within 
Agency components as well as security 
audits of contractor facilities; 


-~Technical supervision of all 
industrial security officers includ- 
ing establishment of comprehensive 
reporting requirements; and 


-~Implementation of an Industrial 
Counterintelligence Program, includ- 
ing the scheduling of audio 
countermeasures inspections of con- 
tractor facilities and the estab- 
lishment of a close working liaison 
with the FBI with respect to 
industrial security. ~ 


Recommendation #6:° That the Director - 4/18/78 D/Sec - ; Couplere 
of Security be required to prepare a 6/2/78 : 

written review of the fitness reports of 

all Industrial security officers as to 

their performance in carrying out his 

security policy. 


P veh 
SECRE 
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RECOMMENDATION OR DIRECTION APPROVAL 


industrial Security Interim Report 


Recommendation #7: That the Director EAG 
of Security develop a centralized index 
of the industrial security status of 
contractor personnel and facilities to 
improve security oversight. 


Recommendation #8: That the Inspector 
General perform functional reviews of 
the Agency Industrial Security Program. 


STATUS | 


4/18/78 
6/2/78 


4/18/78 
6/2/78 , 


4/18/78 
6/2/78 


SECRET 


ACTION NECESSARY FOR 


ASSIGNED TO IMPLEMENTATION 


, 


D/SEC ! 


TARGET COM- 


PLETION DATE 


Fall 1979 


COMMENT/ 
STATUS RECOMMENDATION 


Conversion of the industrial 
security approvals of contractor 
personnel into an automated system 
(SECOND Program) has commenced. 

It is estimated that this effort _ 
will be complete by Fall 1979 22481 


Complete. 
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ACTION — NECESSARY FOR _TARGET COM~ af, COMMENT/ 
RECOMMENDATION OR DIRECTION APPROVAL STATUS ASSIGNED TO IMPLEMENTATION PLETION DATE STATUS RECOMMENDATION 


Industrial Security Interim Report 


Recommendation #10: That the Director ' 4/18/78 : Complete 
of Security be responsible for monitoring 6/2/78 . : 

the security responsibilities of the 

contractor. The enforcement of contract 

terms, including those covering security 

performance, remain the responsibility 

of the contracting officer. 


Recommendation #11: That procedures be 4/18/78 ’ Complete 
revised to provide for a single industrial 6/2/78 : 
security officer to be responsible for 
inspection and policy guidance at each 
' contractor facility wherever cover and 
operational security permit. 


Recommendation #12: That the necessary 4/18/78 : ; Complete 
staff realignment and augmentation be 6/2/78 
approved and that added contractor costs 
be absorbed by the sponsoring office. 


’ 


Recommendation #13: That a uniform 4/18/78 April 1979 Manual in process 
industrial security manual (currently : 6/2/78 of being printed. 
in preparation) be completed at the Should be ready for 
earliest possible date and that the . distribution late 
performance standards contained therein April/early May. 
with appropriate annexes be incorporated 
in the provisions of. classified Agency 
contracts. Community-wide coordination 
and acceptance of. the uniform manual . 
should be encouraged. 


| 
| 
| 
| 
| 
| 
| 
I 
if 
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RECOMMENDATION OR DIRECTION 


Industrial Security Interim Report 


Recommendation #14: That the Director 
of Security periodically review variances 
and waivers recommended by industrial 
security officers to ensure compliance 
with Agency security policy. 


Recommendation #15: That "requests for 


proposals" which anticipate classified 
contracts describe security requirements 
and require that the contractor include 
in his proposal his plan for satisfying 
those requirements. 


Recommendation #16: That contractor 
performance in the security area be 
considered as a critical element for 
consideration in the contracting 
officer's determination of responsibility 
prior to awarding contracts. 


Recommendation #17: That incentive/ 
award fee type contracts include 
security performance along with other 
performance requirements as a basis for 
fee determination. 


Recommendation #18: That classified 
contracts shall incorporate specific 
security performance standards as well 
as language that stresses the impor- 
tance of complying with all security 
requirements. 


APPROVAL 


STATUS 


4/18/78 
6/2/78 


4/18/78 


6/2/78 


4/18/78 
6/2/78 


4/18/78 
6/2/78 


4/18/78 
6/2/78 


ACTION NECESSARY FOR 


ASSIGNED TO IMPLEMENTATION 


D/SEC 


D/SEC 
oGc 


TARGET COM- 


PLETION DATE 


STATUS 


Complete 


Complete 


Complete 


. Complete 


Complete 


COMMENT / 


RECOMMENDATION 


Conflicts resulting 

from such variances 

will be referred to 

the Director of Security 
(Attn: DD/PTOS) for 
resolution, 


RECOMMENDATION OR DIRECTION 


Industrial Security Final Report 
EEE SEES 


Recommendation #1: That there be one 
delegation of contracting authority 
from the DCI to the D/Log with redelega- 
tion of that authority to the contracting 
officers for National and CIA Programs. 


Recommendation #2: That decentralized 
contracting procedures be continued as 
the most cost effective method of 
carrying out industrial R&D contracting. 


Recommendation #3 (ISIR #4): That 
Agency regulations be revised to charge 
the D/Sec with specific responsibility 
for the physical security protection 
of communications centers located at 
Agency-sponsored contractor facilities, 
including those of National Programs, 
and also be revised to charge the D/CO 


APPROVAL STATUS 


IA-RDP83-00156R000200090010-6 


SEGRET 


ACTION NECESSARY FOR 
IMPLEMENTATION 


ASSIGNED TO 


Disapproved 
EAG 5/23/78 
DDCE °* 6/2/78 


No determination. 
Recommendation requested 
by DDCI. 


EAG 4/18/78 
DDCI 6/2/78 


with specific responsibility for emanations, 


transmission and cryptographic security 
protection at these facilities. 


Recommendation #4 (ISIR #6): That the 
D/Sec participate jointly with Agency 
procurement components in preparing 
Letters of Instruction (LOIs) for each 
ISO and to prepare, as part of the 
fitness report cycle, a written evalua- 
tion of his or her performance in 
carrying out security policy. The 
D/Sec's evaluation will be shown to 
the Office of Personnel (OP) for inclu- 
sion in the officer's official personnel 
file. ee cre tg 18 


EAG 4/18/78 
DDCL 6/2/78 


Se 


® 


COMMENT/ 
RECOMMENDATION 


TARGET COM- 


PLETION DATE STATUS 


Disapproved. No 
action necessary. 


Complete. 


Complete 


Complete 


a 
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; ACTION NECESSARY FOR TARGET COM- ; COMMENT/ 
RECOMMENDATION OR DIRECTION . APPROVAL “STATUS ASSIGNED TO IMPLEMENTATION PLETION DATE STATUS RECOMMENDATION 


Industrial Security Final Report 


Recommendation #5 (ISIR #5): That 4/18/78 Complete 
Agency regulations include provision ; 6/2/78 : 

for the D/Sec to exercise functional 

supervision over all ISOs and to set 

up comprehensive reporting require-— 

ments which will include.a direct 

channel of communication between 

each ISO and the OS. 


Recommendation #6: That the D/Sec 4/18/78 Complete 
examine the ISO support structure in ' 6/2/78 ; 
order to recommend to the contracting 
components effective functional 
realignment and reporting responsi~ 
‘ bilities. Emphasis should be placed 
on a more efficient structuring of 
ecurity staffing on 


Recommendation #7: That the Office “No determination. Complete 
of Legislative Counsel in coordination Recommendation requested , 
with the Office of General Counsel by DDCI. 
advise the DCI of legislative proposals 
which could severely impact on the 
procurement authorities of Section 8 
of the CIA Act. 


RECOMMENDATION OR DIRECTION 
Industrial Security Final Report 


Recommendation #8: That CIA continue 
to utilize the ASPR to the. maximum prac~ 
tical extent except in those areas in 
which the FPR is mandatory for all 
Federal agencies. 


Recommendation #9: That the D/Log 
continue to issue notices on procure- 
ment policy and procedures which 
complement the ASPR and FPR and permit 
sufficient flexibility for procurement 
responsiveness to mission requirements. 


Recommendation #10: That the Agency 
continue to implement interagency 
agreements for the development of 
national collection programs. 


Recommendation #11: That the D/L 
issue procurement policy and procedural 
guidance for both Agency and National 
Programs and oversee their implementa- 
tion. . 


Recommendation #12: That the Project _ 
ufficer's Manual be updated and issued. _ 
as a Headquarters handbook to provide 
guidance for technical representatives 
involved in.the industrial contracting 


process. Particular attention should 
be given to guidance on industrial 
security matters. 


a olalwaivi-te 
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SECRET 


ACTION NECESSARY FOR 


STATUS ASSIGNED TO 


No determination 


No determination 


No determination. 
Recommendation requested 
by DDCI. 


No determination 


No determination. 


Recommendation requested by DDCI. 


IMPLEMENTATION 


TARGET COM- 
PLETION DATE 


August 1979 


COMMENT/ 


STATUS RECOMMENDATION 


Complete 


Complete 


Complete 


Complete 


Adopted as an MBO for Logistics 
in 1979. The primary manual will 
go into typing during the week of 
28 May. Several addenda are still 
in writing stage. 


RECOMMENDATION OR DIRECTION 
Industrial Security Final Report 


Recommendation #13: That the Project 
Officer in the Contract Cycle course be 
continued with emphasis on the specific 
role of the contracting officer, the 
_ auditor, the security officer, and the 
technical representative with respect 
to industrial security. 


Recommendation #14: That the D/Log, 
in coordination with the Deputy Director 


for Science and Technology (DDS&T), estab- 


lish contract review procedures which 
will ensure adherence to Agency procure- 
ment policy consistent with National , 
Programs requirements. . 


Recommendation #15: That the Inspector 
General conduct periodic functional 
audits and inspections of the indus- 
trial contracting process. 


Recommendation #16: That the Director 
of Finance and the Chief, Det A, jointly 
conduct periodic reviews of the policies 
and procedures followed by each of their 
components for the purpose of assuring 
appropriate application of contract 
audit policy and procedures. 


aGalalaanvi-te 


APPROVAL 


STATUS 


No determination. 
Recommendation requested 
by DDCI. 


-No determination. 


ey 


No determination. 
Recommendation requested 
by DDCI. 


No determination. 
Recommendation requested 
by DDCI. , 


ASSIGNED TO 


NECESSARY FOR 
IMPLEMENTATION 


TARGET COM- 
PLETION DATE 


STATUS 


Complete 


Complete 


Complete 


Complete 


COMMENT/ 


RECOMMENDATION 
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RECOMMENDATION OR DIRECTION 


Industrial Security Final Report 


Recommendation #17: That the Inspector 
General arrange with representatives, of 
the DCAA to conduct a joint survey to 
determine what action is required to 
improve audit services provided to 
Agency-managed National Programs. 


Recommendation #18: That the General 
Counsel and the D/Log determine what 
further manpower may be necessary to 
enable the division to provide the 
desired legal support to the industrial . 
contracting process while fulfilling its 
other assigned responsibilities. 


Recommendation #19: That the D/Log 
consider the establishment of a Deputy 
Director for Industrial Contracting. 


Recommendation #20: The the D/Log 
review the Procurement Management 
Staff to assure that it is staffed to 
carry its responsibilities. 


Rec - 
reduc 
activities by redirecting competitive 


industrial R&D contracting responsi- 
bilities to the component contracting’ 
teams. : 


Recommendation #22: That the 
Inspector General determine if the 
functional review of industrial 
contracting requires additional 
personnel. 


AOorovan 


APPROVAL 


e 


ACTION 
STATUS 


No determination. 
Recommendation requested 
by DDCI. 


No determination. 
Recommendation requested - 


4 


No determination. 
Recommendation requested by DDCI. 


No determination. 
Recommendation requested by DDCI. 


No determination. - 
Recommendation requested by DDCI. 


No determination. . 
Recommendation requested by DDCI. 


ASSIGNED TO 


THAT 
SEGRE 


NECESSARY FOR 


IMPLEMENTATION 


TARGET COM- 
PLETION DATE 


Complete 


Complete 


Complete 


2 April 79 


Complete 


STATUS 


COMMENT/ 
RECOMMENDATION 


Approval not recommended. 


One additional GS-15 
position will be added 
to OL/PMS. 


Procurement Note to besy 7 
issued week of 23 May. 
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4 eps ACTION NECESSARY FOR TARGET COM- COMMENT / 
RECOMMENDATION OR DIRECTION APPROVAL STATUS ~ ASSIGNED TO IMPLEMENTATION PLETION DATE STATUS RECOMMENDATION 


Industrial Security Final Report 


Recommendation #23: That the DDA No determination. ; : Complete Disapproval recommended. 
establish a working group to develop Recommendation requested ‘ . 15, 16, 17, and 18 
procedures for implementing ISIR ; by DDCI. . . ; . approved and moving 
Recommendations #15, 16, 17, and 18, i toward implementation. 
and report to the DDA within 60 days. 


Recommendation #24: That the D/Log . No determination. April 1979 Action complete for COs. 
(for contracting officers) and D/Fin Recommendation requested except for receipt of LOIs 
(for auditors) participate jointly by DDCI. ; 
with Agency procurement components 
in preparing Letters of Instruction. 

The D/L and the D/Fin shall also 
prepare written evaluations of their 
personnel assigned to Industrial 
Contracting Teams to ensure assess~ 
ment of their technical performance. 
These evaluations shall be shown to 
the individuals concerned, attached 
to their fitness reports, and 
included in their official personnel 
files. 


Recommendation #25: That a compart- Conditional approval é : : See discussion on last 


mented contract management system be EAG 5/23/78 item of this report. 
developed which will include the DDCI 6/2/78 : 
requirements of the users of CONIF, ; ‘ 

STEPS and SPA, and that the’ D/Log 

establish procedures for utilizing 

this system to monitor the performance 

of Agency contracting elements. 


SCORET 
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RECOMMENDATION OR DIRECTION 


Industrial Security Final Report 


Recommendation #26: That the DDS&T 
seek guidance from the Director, NRO 
regarding accountability for property 
acquired with National Programs funds. 


Recommendation #27: That the DDA, 
in coordination with the DDS&T, estab- 
lish a computer-supported system to aid 
in control of classified document 
exchanges throughout the Agency's 
industrial contracting program. 


EAG - 5/23/78 


a. The Agency will maintain the 
dual delegation of contracting 
authority to the Director of Logistics 
and to the Chief, Contracts Staff, OD&E, 
as the National Programs Contracting 
Officer, DDS&T, for Agency and National 
Programs respectively. 


atelaa 


F  seceer 


ACTION NECESSARY FOR TARGET COM- 


APPROVAL STATUS ASSIGNED TO IMPLEMENTATION PLETION DATE 


Approved 
EAG 5/23/78 
DDCI 6/2/78 


No determination. 
Recommendation requested by DDCI. 


Approved 
EAG 5/23/78 
DDCI 6/2/78 
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STATUS 


Complete 


Complete 


COMMENT/ 
RECOMMENDATION 


Agreement reached with 
NRO on procedure 


Because of wide scope, ° 
best directed by DD 
and DDS&T. _ : 


No action necessary. 


Continuation of exist- 
ing arrangement. 


SEE 


: eo ACTION NECESSARY FOR TARGET COM- COMMENT/ 

RECOMMENDATION OR DIRECTION APPROVAL STATUS ASSIGNED TO IMPLEMENTATION PLETION DATE STATUS RECOMMENDATION 

b. The DDS&T shall establish a National Approved DDS&T Paes oe Roupicce: -(Cberter cree: 
Programs Contract Review Board to review EAG 5/23/78 . a quirements set and 
system procurements and associated source DpCI 3, 6/2/78 ; projection of case 
selection procedures. The Board shall be ld : . loading determined. 
chaired by the Associate Deputy Director for . 
Science and Technology and have the follow~ 
ing membership: The Director of Logistics 
or in his absence a representative appointed 
by him; a Senior Program Manager appointed 
by the DDS&T; a Legal Advisor appointed by 
the General Counsel; the Comptroller, DDS&T, 
as a representative of Director of Finance; 
and a Security Advisor appointed by the 
Director of Security. The Chief, Procurement 
Management Staff, DDS&T, and a representative 
of Detachment A DCAA will act as advisors to 
the Board. The Board at its initial meeting 
shall recommend to the DDS&T its procedures, 
types of procurements, and criteria for 
procurements that will be subject to its 
review and approval. A copy of these procedures 
will be submitted for my approval. 

ce. The DDS&T shall revise and update the . Approved Geapicke 
current delegations of contracting authority EAG - 5/23/78 
for National Programs from the DCI to the : ppct 6/2/78 
Chief, Contract Staff, OD&E, to include the 
following provisions: 


(1) The National Programs Contracting 
Officer has direct~access to the Director of 
Logistics for coordinating substantive matters 
and shall bring to his attention any problem 
that could result in embarrassment or legal 
difficulty for the Agency. ‘ 


RECOMMENDATION OR DIRECTION APPROVAL STATUS 
(2) The National Programs Contracting 

Officer shall establish review procedures ' 

which will ensure adherence to Agency 

Procurement policy consistent with 

National Programs requirements. Any policy 

differences, which cannot be reconciled, 

-Shall be submitted to me with a request, 

accompanied by justification, for policy 

exception. , 


d. The Director of Logistics shall Approved 
ensure that the Procurement Management EAG 
Staff, OL, makes periodic inspections of DDCI 
‘the ODSE Contract Staff. 


5/23/78 
6/2/78 


e. The DDS&T shall provide that the ’ Approved 
Director of Logistics or his designee, ., EAG. 
Chief, Procurement Management Staff, OL DDCI 
is the reviewing official on fitness 
reports for the Chief, Procurement Manage- 
ment Staff, DDS&T, and for the Chief, 

Contracts Staff, OD&E. : 


5/23/78 
6/2/78 


£. Concerning Recommendation #25, Approved — 
the DDA and DDS&T will work together to EAG 
establish an appropriate data base to DpCcT 
ensure that essential contract informa~ 
tion is readily available for responding 
to questions on Agency contracting 
activity. 2 


Ss. 


5/23/78 
6/2/78 
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e 
“ 


NECESSARY. FOR 
IMPLEMENTATION 


SECRET 


ACTION 
ASSIGNED TO 


TARGET COM- 
PLETION DATE 


Include National 
Teams on inspec 
tion schedule. 


As FRs are 
written 


DDA-DDS&T “15 Aug 79 


STATUS 


Complete 


COMMENT/ 
RECOMMENDATION 


Agreement has been 
reached and teams are 
‘progressively being 
scheduled for inspec- 
tions. 

D/L or designee will 
execute. r 


Agreement has been 
reached between 


_Logistics and DDS&T 


on monitoring data 

from SPA. Necessary 
program changes are 
currently -being defined. 
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